net.oauth.signature.pem

Class PKCS1EncodedKeySpec

java.lang.Object

net.oauth.signature.pem.PKCS1EncodedKeySpec

public class PKCS1EncodedKeySpec
extends java.lang.Object

PKCS#1 encoded private key is commonly used with OpenSSL. It provides CRT parameters so the private key operation can be much faster than using exponent/modulus alone, which is the case for PKCS#8 encoded key.

Unfortunately, JCE doesn't have an API to decode the DER. This class takes DER buffer and decoded into CRT key.

Field Summary

Fields

Modifier and Type	Field and Description
private java.security.spec.RSAPrivateCrtKeySpec	keySpec

Constructor Summary

Constructors

Constructor and Description
PKCS1EncodedKeySpec(byte[] keyBytes) Create a PKCS#1 keyspec from DER encoded buffer

Method Summary

Modifier and Type	Method and Description
private void	decode(byte[] keyBytes) Decode PKCS#1 encoded private key into RSAPrivateCrtKeySpec.
java.security.spec.RSAPrivateCrtKeySpec	getKeySpec() Get the key spec that JCE understands.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

keySpec

private java.security.spec.RSAPrivateCrtKeySpec keySpec

Constructor Detail

PKCS1EncodedKeySpec

public PKCS1EncodedKeySpec(byte[] keyBytes)
                    throws java.io.IOException

Create a PKCS#1 keyspec from DER encoded buffer

Parameters:

keyBytes - DER encoded octet stream

Throws:

java.io.IOException

Method Detail

getKeySpec

public java.security.spec.RSAPrivateCrtKeySpec getKeySpec()

Get the key spec that JCE understands.

Returns:

CRT keyspec defined by JCE

decode

private void decode(byte[] keyBytes)
             throws java.io.IOException

Decode PKCS#1 encoded private key into RSAPrivateCrtKeySpec.

The ASN.1 syntax for the private key with CRT is

 -- 
 -- Representation of RSA private key with information for the CRT algorithm.
 --
 RSAPrivateKey ::= SEQUENCE {
   version           Version, 
   modulus           INTEGER,  -- n
   publicExponent    INTEGER,  -- e
   privateExponent   INTEGER,  -- d
   prime1            INTEGER,  -- p
   prime2            INTEGER,  -- q
   exponent1         INTEGER,  -- d mod (p-1)
   exponent2         INTEGER,  -- d mod (q-1) 
   coefficient       INTEGER,  -- (inverse of q) mod p
   otherPrimeInfos   OtherPrimeInfos OPTIONAL 
 }
 

Parameters:

keyBytes - PKCS#1 encoded key

Throws:

java.io.IOException